/rooms protected by authentication